Timeline
BOD 22-01
CISA's 2021 KEV mandatory-patch directive for US federal agencies, revoked and superseded by BOD 26-04 on 10 June 2026.
8 of 8 entries (8 events, 0 interactions)
Filters
#13 2 Sept
Revoked directive that BOD 26-04 replaced
Cybersecurity: Threats and Defences: KEV three-day deadline share fell to 71%#12 28 Jul
Mentioned in: KEV patch clocks fell to three days
Cybersecurity: Threats and Defences#9 4 Jul
Mentioned in: BOD 26-04, a fortnight of triage
Cybersecurity: Threats and Defences#8 10 Jun
Superseded by BOD 26-04 on 10 June 2026
Cybersecurity: Threats and Defences: CISA tears up its KEV deadline rules#7 9 Jun
Arista refuses to patch KEV flaw
Cybersecurity: Threats and Defences#4 15 May
Exchange repeats the CISA deadline-before-patch trap
Cybersecurity: Threats and Defences#4 14 May
Mentioned in: UAT-8616 keeps Cisco SD-WAN under fire
Cybersecurity: Threats and Defences#4 13 May